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(54) DATA PROCESSING SYSTEM 
(57)Abstract: 

PURPOSE: To reduce the processing time without deteriorating the 
secrecy of data in the data transmission system between an IC card 
and a terminal equipment 

CONSTITUTION: A password PIN1 inputted by a carrier of an IC 
card 12 is ciphered according to a predetermined key data Rd to 
generate a key data K1. A synthesis text data M1 resulting from 
adding an additional data CER1 to a text data D1 representing a 
deposit balance or the like is ciphered according to the key data K1 
to generate a ciphered text data ME. The ciphered synthesis text 
data ME has information comprising the text data D1 and the 
password PIN1. The ciphered synthesis text data ME is decoded 
and separated into a text data D2 and an additional data CER2. The 
separated additional data CER2 is compared with the additional data 
CER1 stored in advance in the IC card 12. As a result, the adequacy 
of the correlation PIN1 and the text data D2 is judged. Then the 
number of times of ciphering/decoding and the number of times of 
data transmission reception between the terminal equipment 11 and 
the IC card 12 are reduced to reduce the time required for session. 
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* NOTICES * 

JPO and HCIPI are not responsible for any 
damages caused by the use of this translation. 

Uhis document has been translated by computer. So the translation may not reflect the original precisely. 
2.**** shows the word which can not be translated, 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] , , 

[Claim 1] By enciphering wording-of-a-telegram data with transmitting-side equipment, transmitting the this 
enciphered wording-of-a-telegram data to receiving-side equipment, and decrypting the wording-of-a-telegram 
data this enciphered with receiving-side equipment In the data-processing method which sends and receives these 
wor djng-of-a--telegram data the above-mentioned transmitting-side equipment A data addition means to add 
discernment data to the above-mentioned wording-o^a-telegram data, and to generate synthetic wording-of-a- 
telegram data, The 1st encryption means which enciphers with the 1st key data which was able to define the 
password code beforehand, and generates the 2nd key data, While having the 2nd encryption means which enciphers 
the above-mentioned synthetic wording-of^-telegram data with the key data of the above 2nd, and generates code 
composition wording-of-a-teiegram data, and a transmitting means to transmit the above-mentioned code 
composition wording-of-a-telegram data to the above-mentioned receiving-side equipment A receiving means to 
receive the code composition wording-of-a-telegram data with which the above-mentioned receiving-side 
equipment was transmitted from the above-mentioned transmitting means, A decryption means to decrypt the 
above-mentioned code composition wording-of-a-teiegram data according to the 3rd key data corresponding to the 
. key data of the above 2nd, and to generate decode composition wording-of-a-telegram data, A data separation 
means to divide the above-mentioned decode composition wording-oiHa-telegram data into decode wording-of-a- 
telegram data and decode discernment data, When the above-mentioned decode addition data are compared with 
the above-mentioned addition data and the above-mentioned decode addition data and the above-mentioned 
addition data are in agreement, the above-mentioned password code, And it is the data-processing method 
characterized by having a comparative judgment means to judge that the above-mentioned password code and the 
above-mentioned decode wording-of-a-telegram data are inaccurate when it judges that the above-mentioned 
decode wording-of-a-telegram data are just and the above-mentioned decode addition data and the above- 
mentioned addition data are not in agreement 

[Claim 2] The key data of the above 3rd are a data-processing method according to claim 1 characterized by it 
being generated beforehand and coming to be held with an authorization code and the 1st key data at the store of 
. the above-mentioned receiving-side equipment 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[0001] u , , , . 

[Industrial Application] This invention relates to a data-processing method and the data-processing method which 
protects the confidentiality of the commo data used in an IC card and a card data processor in detail 

[0002] , it , 

[Description of the Prior Art] Conventionally, in the field of an information communication link, techniques, such as 
encryption of communication link wording of a telegram and electronic signature, have been used as a means to 
prevent the so-called security risks, such as tapping of the communication link wording of a telegram by the 
malfeasance, and forgery. For example, data-processing methods, such as "the approach of transmitting secret data 
between a sending set and a receiving set equipment", etc. which are shown in the open patent official report No. 
136058 [ Showa 56 to ], have been thought out. 

[0003] Drawing 3 is the outline block diagram showing an example of such a conventional data-processing method. 
This data-processing method has a terminal (transmitting side) 31 and IC card (receiving side) 32, and is 
constituted. If, as for this data-processing method, IC card 32 holder inputs the password code PIN 1 into a terminal 
31, the wording-of-a-telegram data D1, such as the depostts-and-savings balance, will be written in IC card 32 as 
wording-of-a-telegram data D2 at IC card 32. 

[0004] In a terminal 31, the standard key data R which can change the value at random are enciphered by the 
encryption means 311, and the proper key data R1 are generated. It is transmitted by the transceiver means 316 
and this standard key data R is inputted into the encryption means 321 through the transceiver means 326 of IC 
card 32. This encryption means 321 generates the proper key data R2 based on the standard key data R. 
[0005] By changing this standard key data R into each session (data communication between a terminal and an IC 
card) of every at random, it made it difficult that the proper key data R1 and R2 were known by the third party, and 
unjust acts, such as tapping of wording-of-a-telegram data D1 grade and forgery of IC card 32, are prevented. 
Moreover, also when the proper key data R1 and R2 are known by the third party in a certain session, since the 
standard key data R are changed at random, even the proper key data R1 and R2 in other sessions should not be 
known. 

[0006] Then, in a terminal 31, the password code PIN 1 is enciphered considering the above-mentioned proper key 
data R1 as a key by the encryption means 312, and the code password code AV1 is generated. This code password 
code AV1 is inputted into the decryption means 322 through the transceiver means 316 and the transceiver means 
326. Then, the code password code AV1 is decrypted considering the above-mentioned proper key data R2 as a 
key, and the password code PIN 2 is generated. The comparison means 323 compares the decrypted password code 
PIN 2 with the password code PIN 1 in which it was beforehand stored by IC card 32. And as a result of meaning 
whether the password code PIN 2 is in agreement with the password code PIN 1, IC card 32 outputs data CI to a 
terminal 31. 

[0007] The result data 01 are inputted into the decision means 313 through the transceiver means 326 and 316. 
When it is judged that the password code PIN 2 of the decision means 313 does not correspond with the password 
code PIN 1 from the result data C1, the session concerned is interrupted and IC card 32 is discharged from a 
terminal 31. On the other hand, when the password code PIN 2 was in agreement with the password code PIN 1 and 
the decision means 313 judges, it is carried out by the next processing continuing. 

[0008] The wording-o^-a-telegram data D1 are enciphered by the encryption means 314 by using the above- 
mentioned proper key data R1 as a key, and the encryption wording-of-a-te!egram data DE are generated. The 
encryption wording-of^a-telegram data DE are inputted into the decryption means 324 through the transceiver 
means 316 and 326. The encryption wording-of-a-telegram data DE are decrypted by the decryption means 324 by 
using the above-mentioned proper key data R2 as a key, and the wording-of-a-telegram data D2 are generated. 
[0009] The wording-of-a-telegram data D2 are written in the memory in IC card 32 (not shown). The decision 
means 325 judges whether processing of the writing of the wording-of-a-telegram data D2 etc. was performed 
normQ H y( an d transmits the result d B ta C2 to the decision means 315 through the transceiver means 315 and 326. 
As a result of decision, if processing of the writing of the wording-of-a-telegram data D2 etc. is normal, the session 
processing concerned will be ended, and if not normal, IC card 32 will be discharged from a terminal 31. 
[0010] In addition, in the above-mentioned encryption means 312 and 314 and the decryption means 322 and 324, 
encryption algorithms, such as DES (Data Encryption Standard), FEAL t and RSA, are used. 
[0011] 
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suitebL for practical use that there are many counts of tinat there are many counts of t™»»i« J^'^ 
telegram data, encryption, and a decryption in order to require bn* duration (several seconds) as thai pro cessing 
time as™ Whole Moreover, for the object which shortens the processing time, when a s.mple method real.zed a 
It "rocltg meLd. S» confidentiality of data, such as wording-of-a-telegrarr , data, an authonzaton code, and 
proper key data, fell, and the problem of becoming easy to generate a security risk had ansen. 

Ets of the Invention] Then, this invention sets H as the object to offer the data-processing method which can 
shorten the processing time, without reducing the confidentiality of data. 

Eilnl for Solvine the Problem] The data-processing method concerning invention according to claim 1 By 
t^^^ ™ th transmirtng-side equipment, transmitting the this enciphered wor mg- 

TrS£££ * receiving-side equipment, and decrypting the wording-of-a-telegram data this ' ^hered 
with recefving-side equipment In the data-processing method which sends and receives these wording-of-a 
te egram d ta the abL-mentioned transmltting-side equipment A data addition means to add d.scemrnenl date to 
a3e-mentioned wording-of-a-telegram data, and to generate synthetic word.ng-of-a-telegram data. The 1st 
^crttbn means which enciphers with the 1st key data which was able to define the password code beforehand, 
encrypt.cn means wmcn p encryption means which enciphers the above-mentioned 

^H^Z^!^^ key data oUhe above 2nd. and generates code composition word.ng- 

o?^3eZi date an Ta transmitting means to transmit the above-mentioned code composition wording-of-a- 
JiTl Sa above-mentioned receiving-side equipment A receiving means to rece.ve the code — -*°n 
wTrE^f-a-telegram data with which the above-mentioned rooaivinrs.de equ.pment was transmitted from the 
Zt Mentioned fransmitting means. A decryption means to decrypt ^the °£ 'ZTzTL to 
wording-of-a-telegram data according to the 3rd key data corresponding to the key dateof the above 2n* ape to 
wTL decode' composition wording-of-a-telegram data. A data separation means to div.de the above-ment.oned 
decode Impos ^ data into decode wording-of-a-telegram data and decode discernment 

£{SS«i.d decode addition data are compared with the above-mentioned addrt.on data and 
*e ^bove-mentioned decode addition data and the above-mentioned addition data are ,n agreement, the abova- 
mantic^TSSrd code, And when it judges that the above-mentioned dado 'l™*"*?^^*^ rt 
It and the above-mentioned decode addition data and the above-mentioned addrt.cn data are not ,n agreement rt 

the da a -processing method characterized by having the above-mentioned password code and a comparafve 
udg^ent mea" to udgo that the above-mentioned decode wording-of-a-telegram data are .naccurate 
SOU ^Date-processing method concerning invention according to claim 2 It is the data-processing method 
according to daim 1 characterized by the key date of the above 3rd being generated beforehand and com.ng to hold 
them with an authorization code and the 1 st key data at a store. 

[Son] In a transmitting side, the data-processing method concerning invention according to claim 1 enciphers 
an aut orLtion code according to the 1st (determined according to card) key data defined bafcrahan* and 
EeneratesSe 2nd key data. Moreover, addition data are added to the wording-of^-telegram data in which the 
Ton enf which should be transmitted is shown, and synthetic wording-of-a-telegram data are generated. And this 
sySc wording-of-a-telegram data is enciphered based on the key data of the above 2nd and code composition 
Snror-T-teTgram data are generated. This code composition wording-of-a^elegram date ,s transmitted to a 

Kuft t^J^XSl^^ code common wording-of-a-te, 6 ^ ^anT ^ 
a receiving means. This code composition wording-of-a-telegram date is decrypted with the 3rd key data, and 
generates dTcode composition wording-of-a-telegram date. This decode composition wording-of-a-telegram data .s 
SrJJSed fntc rood Wording-of-a-telegram data and decode discernment date. When th.s decode discernment date 
^^mr^A^-m^omd discernment data and the above-mentioned decode discernment data and 
le aZ -mined discernment data are in agreement It is judged that the above-ment.oned authonz* .on code 
and the above-mentioned decode wording-of-a-telegram date are just Then this ^^^^^ W '" 
be written in the IC card which is receiving-side equipment, for example. On the contrary when the above- 
■ ment oS decod disoe mment date and the above-mentioned discernment date are not ^greement.t .s judged 
teat ii" above-mentioned authorization code and the above-mentioned decode word.ng-of-a-telegram data are 
inaccurate In this case, wording-of-a-telegram date are not written .n an IC card. 

K>01 TZs. in order to encipher wording-of-a-telegram data with discernment data and to transmit, tee route, e 
which transmits only an authorization code apart from transmission of word.ng-of^-telegram ^. and p^rms 
the authentication like before can be omitted, and the effectiveness of transmission of word.ng-of-a-te egram data 
is raised Moreover, since discernment date and wording-of-a-telegram date are enciphered and decrypted 

muSneously, the step of encryption and a decryption also decreases compared with the conventional case, and 
ST effectiveness of the data transmission processing is raised. Furthermore, since the author.** °od. of a 
proper was used for the receiving side in this case and wording-of-a-telegram data are encphered. the securrty 
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about wording-of-a-telegram data which transmits is raised even to the same extent as the case where it Is 
presupposed that the conventional standard key is changed for every «««on. 

[001 8] Data-processing method concerning invention according to claim 2 With an authorization code and the 1 st 
toy date, the key data of the above 3rd are generated beforehand and held at the storage of the above-mentioned 
receiving-side equipment For this reason, it is not necessary to transmit the key data of the above 3rd to 
receiving-side equipment from transmitting-side equipment, and the time amount wh.ch a sess.on takes can be 
shortened. 

[Example] Below, the example of this invention is explained, referring to a drawing. 

O02O1 Drawing 1 is the block diagram showing the outline of the data-processing method concerning the 1 st 
exampl e "^nisTnvention. This data-processing method has a terminal (transmitting side) 1 and IC card (recemng 
3*012. and is constituted. This example explains the case where the terminal by which online connectio was 
made considering for example, the ATM card for banks as a terminal at the host computer of a bank is used as IC 
card 12 In this case, an authorization code shall be the thing of a different proper for every card, and only the card 
ho der shall k ow it. Therefore, hereafter, a card holder inputs authorization cade P1N1 into a terminal 3 , a terminal 
So™ furtfT « <*ermined actuation, and the case where the credit of the fixe d amount of mpney ,s drawn out 
Ts expTinad Credit cash-drawer processing needs to be performed with a terminal and a host computer, and the 
credS bal nce needs to calculate it and ft needs to write this credit balance in a card. Consequently, the wordmg- 
oS-telegram data D1 in which the credit balance and its writing are shown from a host computer are transmitted 
to a terminal 31, and a terminal transmits this wording-of-a-telegram data to an IC card, 

$021] In the terminal 1 1 which constitutes transmitting-side equipment, it has the 1st. encryption means 11. This 
st encryption Tans 11 enciphers inputted authorization code PIN1 according to the key data Rd wh.ch are *e. 
code ofX secrecy determined at the time of card issuance and ^generate, .the , toy ^ata K1. Moreover, th.s 1st 
encryption means 11 is constituted by using the encryption algorrthm exhorted [ RSA / DES, FEAL, J. 
[<S Moreover, a terminal 1 1 adds the discernment data CER1 to the above-mentioned wording- 
data D1. has a data addition means 112 to generate the synthetic word,ng-of-a-telegram data Ml, the , 2nd 
encryption means 113 which enciphers the synthetic wording^f-a-telegrarr , data Ml generates the code 
composition wording-of-a-telegram data ME, and the transceiver means (I/O c,rcu.t) 1 14 which transmit and 
S 'date beJween IC canto 12. and is constituted. The same open moid encryption algonthm as the encryption 
means of the above 1st also constitutes the 2nd encryption means 113. 

SoS] On the other hand. IC card 12 is constituted including B-brt CPU etc., and thfe CPU is perform.ng processmg 
shown by the following processing means. Namely, a transceiver means 124 by which IC card 12 transmrts and 
ecelves date between terminals 11 (I/O circuit), A decryption means 121 to decrypt code composmon word,„g-of- 
a-telegram data according to the key data K2 which were able to be defined beforehand, and to generate the 
synthetic wording-of-a-telegram data M2. A data separation means 122 to d.v.de the synthetic wording-of-a- 
telegram daL M^into the wording-of^-telegram data D2 and the discernment data CER2. The discernment data 
CmiZe Tmpar d with the discernment data CER1. and authorization code P.N1 and the ^ffZS e ZZ 
date M2 have a comparative judgment means 123 to judge whether it is the right, and are constituted. Furthermore. 
JthoS not illustrated, this IC card 12 has EEPROM in which data, such as the above-mentioned ored.t balance, 
were stored, and is constituted. . , 

[0024] The above-mentioned decryption means 121 can process the inverse function of the above-mentioned 
encryption means 113, and these decryption means 121 and the encryption means 113 can use encryption 
algorithms, such as DES, FEAL. and RSA. like the above. Moreover the processing in the above-mentioned data 
addition means 1 12 and the data separation means 1 22 may use what kind of mode of processing, as long as the 
wording-of-a-telegram data D2 and the discernment data CER2 are disengageable. . . . A 

[0025]ln addition, the above-mentioned terminal has the decision means 115, this decision ^^l^i 

of wording-of-a-telegram data and an authorization code ], and injustice based on the response from the above 
mentioned IC card, for example, when inaccurate, a right case orders it the blowdown processing from the terminal 
of the ICcard concerned etc.. while outputting that to a host computer. 

[0026] Next, an operation of the data^rocessing method concerning this example .s expla ,ned refe rnng totte flow 
chart of drawing . In this flow chart. S201-S204 show the process.ng by the s,de of a terminal 1 1. and S205 S21 1 
show the processing by the side of an IC card. 

[0027] Authorization code PIN1 is inputted into a terminal 1 1 by the IC card holder Accord.ng to the key ^dat , Rd 
determined at the time of card issuance, it enciphers with the encryption means 11 1, and auteorizat on code PIN1 
generates the key data K1 (S201). And about the wording-of-a-telegram data D .n wh.ch the credrt balance fron a 
holt computer etc. is shown, the discernment data CER1 are added to the wording-of-a-tebgram data D1 w th the 
data addition means 112 (for example, a parity bit is added), and the synthetic word,ng-of-a-telegram data M1 are 

SSflSSL. this synthetic wording-of-a-telegram data Ml U = enciphered ---gnjjto *• *™ ™ ti ° ned 
key date K1. and the code composition wording-of-a-telegram data ME are generated (S203) This code 
composition wording-of-a-telegram data ME is transmitted to IC card 12 through the transceiver means 114 (S204). 
Consequently IC card 1 2 receives this code composition wording-of-a-telegram data through the transce.ver 

[0029] S' received code composition wording-of-a-telegram data ME are decrypted by the decryption means 1 21 
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according to the key data K2, and the synthetic wo rding-of-a -tele gram data M2 are generated (S205). The key data 
K2 have the value corresponding to the above-mentioned key data K1, and the decryption means 121 performs 
decryption processing according to the operations sequence of the above-mentioned encryption means 113 and 
reverse. In addition, the key data K2 can also use data equivalent to the above-mentioned key data K1, and you may 
make it receive this key data K2 from a terminal 11 after session initiation by using the encryption algorithm of 
object key methods, such as DES. Furthermore, the key data K2 enciphered with the key data Rd which are the 1st 
key data beforehand set up according to each card in the authorization code (personal identification number) which 
may store in JC card 12 the value defined at the time of issuance of IC card 12, for example, is inputted at the time 
of each card issuance may be beforehand stored in IC card 12. Since the count of transmission and reception of the 
data of a terminal 1 1 and IC card 12 becomes fewer when the key data K2 are stored in IC card 12. much more 
high-speed processing can be aimed at. 

[003D] Furthermore, this synthetic wording-oHrtelegram data M2 is separated into the wording-of-a-telegram 
data D2 and the discernment data CER2 by the data separation means 1 22 (S2D6). The comparative judgment 
means 123 compares the separated discernment data CER2 with the discernment data CER1 in which it was stored 
by IC card 12 at the time of 10 card issuance (S207), In addition, the discernment data CER1 stored in IC card 12 
are equivalent to the discernment data CER1 stored in the above-mentioned terminal 11. 
[0031] As a result of a comparison, when the separated discernment data CER2 are In agreement with the 
discernment data CER1, YES), above-mentioned authorization code PIN1, and the wording-of-a-telegram data D2 
are judged to be the rights by (S207 (S208). Consequently, as a result of showing normal processing, the wording- 
of-a-telegram data D2 in which this credit balance is shown transmit data CO to the transceiver means 114 through 
the transceiver means 124, while being written in EEPROM of IC card 12 (S209). As a result, the decision means 
1 1 5 terminates the session of IC card 1 2 and a terminal 1 1 according to data CO. 

[0032] As a result of a comparison, when the separated discernment data CER2 are not in agreement with the 
discernment data CER1. it is judged by (S207 that NO), above-mentioned authorization code PIN1. and the wording- 
of-a-telegram data D2 are not right (S210). That is, authorization code PIN1 judges that the not an authorization 
code but wording-o^a-telegram data D2 of IC card 12 in the session concerned differ from the wording-of-a- 
telegram data D1 as a result processed with the host computer. Therefore, without writing this wording-of-a- 
telegram data D2 in IC card 12, as a result of showing exception processing, data CO are transmitted to the 
transceiver means 114 through the transceiver means 124. Consequently, the decision means 115 discharges IC 
card 12 from a terminal 1 1 (S211X and a session is terminated. Consequently, the unjust writing to IC card 12 is 

[0^33]" As^ mentioned above, as explained, in this example, it enciphers according to the key data K1 which generated 
the wording-of-a-telegram data D1 from authorization code PIN1, and the code composition wording-of-a-telegram 
data ME are generated. Therefore, in addition to the wording-of-a-telegram data D1, the code composition wordmg- 
o^a-telegram data ME will also have the information on authorization code PIN1. For this reason, the data 
processing method concerning this example does not need to perform encryption and a decryption for authorization 
code PIN1 and the wording-of-a-telegram data D1 independently, as performed by the conventional data- 
processing method. Moreover, as compared with the conventional data-processing method, transmission and 
reception of the data between a terminal and an IC card decrease from 4 times to 2 times, and the count of 
encryption and a decryption is decreasing the data-processing method concerning this example from 6 times to 2 
times. Therefore, according to this example, the time amount which the session between a terminal and an IC card 
takes can be substantially decreased from Number sec to hundreds msec(s), 

[0034] Moreover the key data K1 are generated by enciphering different authorization code PIN1 for every IC card. 
For this reason, since the key data K1 of other IC cards 12 will not be known even if authorization code PIN1 of IC 
card 12 of one sheet is known by the third party, the confidentiality of the data of other IC cards 12 does not fall. 
Therefore, it is not spoiled to the confidentiality of the data of other IC cards, and the damage by the so-called 
security risk can be suppressed to the minimum. Furthermore, also when a third party acquires others' IC card 12, if 
a third party does not know the authorization code of this IC card, the data encryption and the decryption are 
impossible. 

[0035] Therefore, the data-processing method concerning this example can shorten the time amount which a 
session takes, without reducing the confidentiality of data as compared with the conventional data-processing 
method. 
[003 B] 

[Effect of the Invention] The data-processing method which can shorten the processing time can be offered without 
reducing the confidentiality of data according to this invention, as explained above. 
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[Brief Description of the Drawings] , awflmn i n f+Wi* 

fDnwlng 13 It is the outline block diagram showing the data-processing method concerning the 1 st example of this 

It is the flow chart which shows actuation of the data-processing method concerning the 1st example of 

£12? is the outline block diagram showing an example of the conventional data-processing method. 
[Description of Notations] 

11 Terminal System (Transmitting Side) 

12 IC Card (Receiving Side) 

111 1st Encryption Means 

1 1 2 Data Addition Means 

113 2nd Encryption Means 

114 Transceiver Means (Transmitting Means) 

121 Decryption Means 

122 Data Separation Means 

123 Comparative Judgment Means 

124 Transceiver Means (Receiving Means) 
D1 Wording-of-a-telegram data 

D2 Wording-of-a-telegram data (decode wording-of-a-telegram data; 
PIN1 Authorization code 
CER1 Discernment data 

CER2 Discernment data (decode discernment data) 
M1 Synthetic wording-of-a-telegram data 

M2 Synthetic wording-of-a-telegram data (decode composition wording-of-a-telegram data) 
Rd Key data (1 st key data) 
K1 Key data (2nd key data) 
K2 Key data (3rd key data) 
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